Re: which api functions I will need to make login ?

ahmedbarbary

You could not apply [FromBody] for more than one parameter per action method. And I have mentioned it in this
thread.

Then you could write logic to check expiredate password or count attempt login or validate user and password etc in the PostUserLogins action.It is a bit complex.Also you could split these functions and call them in PostUserLogins action.
No need to add [HttpPost] or [HttpGet].I suggest that you could use filter.

As I suggeted in this thread that you could add a LoginFailureCount property to save the failure count.And use filter to prevent the locked user from getting into the PostUserLogins action.

Best Regards,

Rena

MSDN Community Support
Please remember to click "Mark as Answer" the responses that resolved your issue.
If you have any compliments or complaints to MSDN Support, feel free to contact MSDNFSF@microsoft.com.